@almadar/std 16.235.0 → 16.236.0

package/behaviors/lolo/ui/core/molecules/ui-data-grid.lolo

@@ -4,6 +4,10 @@ app ui-data-grid "1.0.0"
 ;; @pattern "data-grid"
 orbital DataGridOrbital {
     type DataGridLoaded = Event { data : [DataGridItem] } "DataGrid rows finished loading; payload.data holds the collection"
+  type DataGridEmptyAction = {
+    label : string!
+    event : event
+  }
   type DataGridFieldsItem = {
     name : string!
     label : string
@@ -26,6 +30,8 @@ orbital DataGridOrbital {
     navigatesTo : string
     icon : icon
     variant : "primary" | "secondary" | "ghost" | "danger"
+    when : SExpr
+    roles : [string]
   }
   type DataGridError = {
     message : string!
@@ -59,10 +65,14 @@ orbital DataGridOrbital {
           positionEvent: @config.positionEvent
           dndItemIdField: @config.dndItemIdField
           dndRoot: @config.dndRoot
+          emptyIcon: @config.emptyIcon
+          emptyTitle: @config.emptyTitle
+          emptyDescription: @config.emptyDescription
+          emptyAction: @config.emptyAction
           entity: @entity
           fields: @config.fields
           columns: @config.columns
-          itemActions: @config.itemActions
+          itemActions: (array/filter @config.itemActions (fn action (or (= (array/len (object/get @action roles [])) 0) (array/includes (object/get @action roles []) @config.viewerRole))))
           maxInlineActions: @config.maxInlineActions
           scrollX: @config.scrollX
           cols: @config.cols
@@ -92,10 +102,14 @@ orbital DataGridOrbital {
           positionEvent: @config.positionEvent
           dndItemIdField: @config.dndItemIdField
           dndRoot: @config.dndRoot
+          emptyIcon: @config.emptyIcon
+          emptyTitle: @config.emptyTitle
+          emptyDescription: @config.emptyDescription
+          emptyAction: @config.emptyAction
           entity: @entity
           fields: @config.fields
           columns: @config.columns
-          itemActions: @config.itemActions
+          itemActions: (array/filter @config.itemActions (fn action (or (= (array/len (object/get @action roles [])) 0) (array/includes (object/get @action roles []) @config.viewerRole))))
           maxInlineActions: @config.maxInlineActions
           scrollX: @config.scrollX
           cols: @config.cols
@@ -125,10 +139,14 @@ orbital DataGridOrbital {
           positionEvent: @config.positionEvent
           dndItemIdField: @config.dndItemIdField
           dndRoot: @config.dndRoot
+          emptyIcon: @config.emptyIcon
+          emptyTitle: @config.emptyTitle
+          emptyDescription: @config.emptyDescription
+          emptyAction: @config.emptyAction
           entity: @payload.data
           fields: @config.fields
           columns: @config.columns
-          itemActions: @config.itemActions
+          itemActions: (array/filter @config.itemActions (fn action (or (= (array/len (object/get @action roles [])) 0) (array/includes (object/get @action roles []) @config.viewerRole))))
           maxInlineActions: @config.maxInlineActions
           scrollX: @config.scrollX
           cols: @config.cols
@@ -204,6 +222,22 @@ orbital DataGridOrbital {
         @label "Dnd Root"
         @description "Mark this container as the DnD root for its subtree — descendant zones share one DndContext (cross-container drag). Use on an outer container whose own items are not draggable."
         @tier "presentation"
+      emptyIcon : icon
+        @label "Empty Icon"
+        @description "Domain icon for the empty state."
+        @tier "presentation"
+      emptyTitle : string
+        @label "Empty Title"
+        @description "Specific title ('No orders yet')."
+        @tier "presentation"
+      emptyDescription : string
+        @label "Empty Description"
+        @description "What will appear here once rows exist."
+        @tier "presentation"
+      emptyAction : DataGridEmptyAction
+        @label "Empty Action"
+        @description "Create-the-first-item action."
+        @tier "presentation"
       fields : [DataGridFieldsItem] = []
         @label "Fields"
         @description "Field definitions for rendering each card. The pattern contract in `@almadar/core/patterns` documents `columns` as the wire-format alias the compiler emits — both names resolve to the same shape here. Pass either."
@@ -284,6 +318,10 @@ orbital DataGridOrbital {
         @label "Relations Data"
         @description "Relation display data: { fieldName: [{value, label}] } — injected server-side by the runtime (relation-option injection) or bound by compiled codegen; resolves stored foreign ids to display names for a field whose type is relation. Same contract DetailPanel takes."
         @tier "presentation"
+      viewerRole : string = ""
+        @label "Viewer's role"
+        @description "The viewer's role that each action's `roles` is checked against; bind it at the call site (e.g. `viewerRole: @user.role`). Empty = only actions with no `roles` show."
+        @tier "policy"
       selfFetch : boolean = true
         @label "Fetch its own rows on mount?"
         @description "true (default) = standalone mount self-populates on INIT. false = a composing atom owns the fetch and routes its loaded event here — suppresses the wrapper's own un-hydrated fetch so it cannot race the composer's."

package/behaviors/lolo/ui/core/molecules/ui-data-list.lolo

@@ -3,6 +3,10 @@ app ui-data-list "1.0.0"
 ;; @pattern "data-list"
 orbital DataListOrbital {
     type DataListLoaded = Event { data : [DataListItem] } "DataList rows finished loading; payload.data holds the collection"
+  type DataListEmptyAction = {
+    label : string!
+    event : event
+  }
   type DataListFieldsItem = {
     name : string!
     label : string
@@ -22,6 +26,8 @@ orbital DataListOrbital {
     event : event!
     icon : icon
     variant : "primary" | "secondary" | "ghost" | "danger"
+    when : SExpr
+    roles : [string]
   }
   type DataListError = {
     message : string!
@@ -65,10 +71,14 @@ orbital DataListOrbital {
           positionEvent: @config.positionEvent
           dndItemIdField: @config.dndItemIdField
           dndRoot: @config.dndRoot
+          emptyIcon: @config.emptyIcon
+          emptyTitle: @config.emptyTitle
+          emptyDescription: @config.emptyDescription
+          emptyAction: @config.emptyAction
           entity: @entity
           fields: @config.fields
           columns: @config.columns
-          itemActions: @config.itemActions
+          itemActions: (array/filter @config.itemActions (fn action (or (= (array/len (object/get @action roles [])) 0) (array/includes (object/get @action roles []) @config.viewerRole))))
           maxInlineActions: @config.maxInlineActions
           itemClickEvent: @config.itemClickEvent
           gap: @config.gap
@@ -107,10 +117,14 @@ orbital DataListOrbital {
           positionEvent: @config.positionEvent
           dndItemIdField: @config.dndItemIdField
           dndRoot: @config.dndRoot
+          emptyIcon: @config.emptyIcon
+          emptyTitle: @config.emptyTitle
+          emptyDescription: @config.emptyDescription
+          emptyAction: @config.emptyAction
           entity: @entity
           fields: @config.fields
           columns: @config.columns
-          itemActions: @config.itemActions
+          itemActions: (array/filter @config.itemActions (fn action (or (= (array/len (object/get @action roles [])) 0) (array/includes (object/get @action roles []) @config.viewerRole))))
           maxInlineActions: @config.maxInlineActions
           itemClickEvent: @config.itemClickEvent
           gap: @config.gap
@@ -149,10 +163,14 @@ orbital DataListOrbital {
           positionEvent: @config.positionEvent
           dndItemIdField: @config.dndItemIdField
           dndRoot: @config.dndRoot
+          emptyIcon: @config.emptyIcon
+          emptyTitle: @config.emptyTitle
+          emptyDescription: @config.emptyDescription
+          emptyAction: @config.emptyAction
           entity: @payload.data
           fields: @config.fields
           columns: @config.columns
-          itemActions: @config.itemActions
+          itemActions: (array/filter @config.itemActions (fn action (or (= (array/len (object/get @action roles [])) 0) (array/includes (object/get @action roles []) @config.viewerRole))))
           maxInlineActions: @config.maxInlineActions
           itemClickEvent: @config.itemClickEvent
           gap: @config.gap
@@ -250,6 +268,22 @@ orbital DataListOrbital {
         @label "Dnd Root"
         @description "Mark this container as the DnD root for its subtree — descendant zones share one DndContext (cross-container drag). Use on an outer container whose own items are not draggable."
         @tier "presentation"
+      emptyIcon : icon
+        @label "Empty Icon"
+        @description "Domain icon for the empty state."
+        @tier "presentation"
+      emptyTitle : string
+        @label "Empty Title"
+        @description "Specific title ('No orders yet')."
+        @tier "presentation"
+      emptyDescription : string
+        @label "Empty Description"
+        @description "What will appear here once rows exist."
+        @tier "presentation"
+      emptyAction : DataListEmptyAction
+        @label "Empty Action"
+        @description "Create-the-first-item action."
+        @tier "presentation"
       fields : [DataListFieldsItem] = []
         @label "Fields"
         @description "Field definitions for rendering each row. The pattern contract in `@almadar/core/patterns` documents `columns` as the wire-format alias the compiler emits — both names resolve to the same shape here. Pass either."
@@ -366,6 +400,10 @@ orbital DataListOrbital {
         @label "Relations Data"
         @description "Relation display data: { fieldName: [{value, label}] } — injected server-side by the runtime (relation-option injection) or bound by compiled codegen; resolves stored foreign ids to display names for a field whose type is relation. Same contract DetailPanel takes."
         @tier "presentation"
+      viewerRole : string = ""
+        @label "Viewer's role"
+        @description "The viewer's role that each action's `roles` is checked against; bind it at the call site (e.g. `viewerRole: @user.role`). Empty = only actions with no `roles` show."
+        @tier "policy"
       selfFetch : boolean = true
         @label "Fetch its own rows on mount?"
         @description "true (default) = standalone mount self-populates on INIT. false = a composing atom owns the fetch and routes its loaded event here — suppresses the wrapper's own un-hydrated fetch so it cannot race the composer's."

package/behaviors/lolo/ui/core/molecules/ui-document-details.lolo

@@ -3,7 +3,7 @@ app ui-document-details "1.0.0"
 ;; @capabilities "document settings, page details, post settings sidebar, metadata panel, document properties, publish settings"
 ;; @pattern "document-details"
 orbital DocumentDetailsOrbital {
-    type DocumentDetailsLoaded = Event { data : [DocumentDetailsItem] } "DocumentDetails rows finished loading; payload.data holds the collection"
+    type DocumentDetailsLoaded = Event { data : DocumentDetailsItem } "DocumentDetails row finished loading; payload.data holds the single row"
   type DocumentDetailsFieldsItem = {
     name : string
     key : string
@@ -28,11 +28,11 @@ orbital DocumentDetailsOrbital {
   }
 
   trait DocumentDetailsRender -> @rebindable DocumentDetailsItem [interaction, instance] {
-    initial: idle
+    initial: resolving
 
-    state idle {
-      INIT -> idle when @config.selfFetch
-        (fetch DocumentDetailsItem { emit: { success: DocumentDetailsLoaded } })
+    state resolving {
+      INIT -> idle when (and @config.selfFetch (!= (str/default ?id "") ""))
+        (fetch DocumentDetailsItem { id: ?id, emit: { success: DocumentDetailsLoaded } })
         (render-ui main {
           entity: @entity
           fields: @config.fields
@@ -42,7 +42,20 @@ orbital DocumentDetailsOrbital {
           className: @config.className
           type: document-details
         })
-      INIT -> idle when (not @config.selfFetch)
+      INIT -> idle when (not (and @config.selfFetch (!= (str/default ?id "") "")))
+        (render-ui main {
+          entity: @entity
+          fields: @config.fields
+          metaCommitEvent: @config.metaCommitEvent
+          relationEvent: @config.relationEvent
+          title: @config.title
+          className: @config.className
+          type: document-details
+        })
+    }
+
+    state idle {
+      INIT -> idle
         (render-ui main {
           entity: @entity
           fields: @config.fields
@@ -79,11 +92,19 @@ orbital DocumentDetailsOrbital {
         @description "Makes relation chips clickable: emitted with { field, id, name } when a hydrated relation value (or one row of a many-relation) is clicked — the host routes it to the linked record's own surface."
         @tier "essential"
       DocumentDetailsLoaded
-        @description "DocumentDetails rows finished loading; payload.data holds the collection."
+        @description "DocumentDetails row finished loading; payload.data holds the single row."
         @synonyms "loaded, fetched, retrieved"
         @tier "essential"
     }
 
+    listens {
+      INIT {
+        id : string
+      }
+        @description "Mount payload; a host that routes to this panel by id (a :id page param) passes it here."
+        @tier "internal"
+    }
+
     config {
       fields : [DocumentDetailsFieldsItem] = []
         @label "Fields"
@@ -106,8 +127,8 @@ orbital DocumentDetailsOrbital {
         @description "className prop"
         @tier "presentation"
       selfFetch : boolean = true
-        @label "Fetch its own rows on mount?"
-        @description "true (default) = standalone mount self-populates on INIT. false = a composing atom owns the fetch and routes its loaded event here — suppresses the wrapper's own un-hydrated fetch so it cannot race the composer's."
+        @label "Fetch its own row on mount?"
+        @description "true (default) = a mount that carries an id loads that one row (never the collection); a create-mode mount skips the load. false = a composing atom owns the load."
         @tier "internal"
     }
   }

package/behaviors/lolo/ui/core/molecules/ui-document-panel.lolo

@@ -8,6 +8,7 @@ orbital DocumentPanelOrbital {
     event : event
     icon : icon
     variant : "primary" | "secondary" | "ghost" | "danger"
+    roles : [string]
   }
 
   entity DocumentPanelItem [runtime] {
@@ -29,7 +30,7 @@ orbital DocumentPanelOrbital {
           coverImage: @config.coverImage
           icon: @config.icon
           value: @entity.value
-          actions: @config.actions
+          actions: (array/filter @config.actions (fn action (or (= (array/len (object/get @action roles [])) 0) (array/includes (object/get @action roles []) @config.viewerRole))))
           maxInlineActions: @config.maxInlineActions
           editing: @config.editing
           titleCommitEvent: @config.titleCommitEvent
@@ -51,7 +52,7 @@ orbital DocumentPanelOrbital {
           coverImage: @config.coverImage
           icon: @config.icon
           value: @entity.value
-          actions: @config.actions
+          actions: (array/filter @config.actions (fn action (or (= (array/len (object/get @action roles [])) 0) (array/includes (object/get @action roles []) @config.viewerRole))))
           maxInlineActions: @config.maxInlineActions
           editing: @config.editing
           titleCommitEvent: @config.titleCommitEvent
@@ -73,7 +74,7 @@ orbital DocumentPanelOrbital {
           coverImage: @config.coverImage
           icon: @config.icon
           value: @entity.value
-          actions: @config.actions
+          actions: (array/filter @config.actions (fn action (or (= (array/len (object/get @action roles [])) 0) (array/includes (object/get @action roles []) @config.viewerRole))))
           maxInlineActions: @config.maxInlineActions
           editing: @config.editing
           titleCommitEvent: @config.titleCommitEvent
@@ -192,6 +193,10 @@ orbital DocumentPanelOrbital {
         @label "Class Name"
         @description "className prop"
         @tier "presentation"
+      viewerRole : string = ""
+        @label "Viewer's role"
+        @description "The viewer's role that each action's `roles` is checked against; bind it at the call site (e.g. `viewerRole: @user.role`). Empty = only actions with no `roles` show."
+        @tier "policy"
     }
   }
 

package/behaviors/lolo/ui/core/molecules/ui-document-viewer.lolo

@@ -7,6 +7,7 @@ orbital DocumentViewerOrbital {
     event : event
     navigatesTo : string
     variant : "primary" | "secondary" | "ghost"
+    roles : [string]
   }
   type DocumentViewerDocumentsItem = {
     label : string!
@@ -41,7 +42,7 @@ orbital DocumentViewerOrbital {
           showToolbar: @config.showToolbar
           showDownload: @config.showDownload
           showPrint: @config.showPrint
-          actions: @config.actions
+          actions: (array/filter @config.actions (fn action (or (= (array/len (object/get @action roles [])) 0) (array/includes (object/get @action roles []) @config.viewerRole))))
           documents: @config.documents
           isLoading: @config.isLoading
           error: @config.error
@@ -111,6 +112,10 @@ orbital DocumentViewerOrbital {
         @label "Class Name"
         @description "Additional CSS classes"
         @tier "presentation"
+      viewerRole : string = ""
+        @label "Viewer's role"
+        @description "The viewer's role that each action's `roles` is checked against; bind it at the call site (e.g. `viewerRole: @user.role`). Empty = only actions with no `roles` show."
+        @tier "policy"
     }
   }
 

package/behaviors/lolo/ui/core/molecules/ui-drawer.lolo

@@ -19,6 +19,8 @@ orbital DrawerOrbital {
       OPEN -> open
         (render-ui drawer {
           isOpen: @config.isOpen
+          onExited: @config.onExited
+          contained: @config.contained
           onClose: @config.onClose
           title: @config.title
           children: @config.children
@@ -45,6 +47,9 @@ orbital DrawerOrbital {
     }
 
     emits {
+      @config.onExited -> external { }
+        @description "Fires after the exit animation completes (the drawer is about to unmount)."
+        @tier "essential"
       @config.onClose -> external { }
         @description "Callback when drawer should close (injected by slot wrapper)"
         @tier "essential"
@@ -60,6 +65,14 @@ orbital DrawerOrbital {
         @label "Is Open"
         @description "Whether the drawer is open (defaults to true when rendered by slot wrapper)"
         @tier "presentation"
+      onExited : event = "EXITED"
+        @label "On Exited"
+        @description "Fires after the exit animation completes (the drawer is about to unmount)."
+        @tier "presentation"
+      contained : boolean = false
+        @label "Contained"
+        @description "Render inside the nearest positioned ancestor (a preview frame) instead of over the window."
+        @tier "presentation"
       onClose : event = "CLOSE"
         @label "On Close"
         @description "Callback when drawer should close (injected by slot wrapper)"

package/behaviors/lolo/ui/core/molecules/ui-floating-action-button.lolo

@@ -8,6 +8,7 @@ orbital FloatingActionButtonOrbital {
     icon : icon!
     event : event
     variant : "primary" | "secondary" | "success" | "danger" | "warning"
+    roles : [string]
   }
 
   entity FloatingActionButtonItem [runtime] {
@@ -22,7 +23,7 @@ orbital FloatingActionButtonOrbital {
         (render-ui main {
           action: @config.action
           actionPayload: @config.actionPayload
-          actions: @config.actions
+          actions: (array/filter @config.actions (fn action (or (= (array/len (object/get @action roles [])) 0) (array/includes (object/get @action roles []) @config.viewerRole))))
           icon: @config.icon
           onClick: @config.onClick
           variant: @config.variant
@@ -79,6 +80,10 @@ orbital FloatingActionButtonOrbital {
         @label "Class Name"
         @description "Additional CSS classes"
         @tier "presentation"
+      viewerRole : string = ""
+        @label "Viewer's role"
+        @description "The viewer's role that each action's `roles` is checked against; bind it at the call site (e.g. `viewerRole: @user.role`). Empty = only actions with no `roles` show."
+        @tier "policy"
     }
   }
 

package/behaviors/lolo/ui/core/molecules/ui-floating-toolbar.lolo

@@ -12,6 +12,7 @@ orbital FloatingToolbarOrbital {
     active : boolean
     disabled : boolean
     testId : string
+    roles : [string]
   }
 
   entity FloatingToolbarItem [runtime] {
@@ -24,7 +25,7 @@ orbital FloatingToolbarOrbital {
     state idle {
       INIT -> idle
         (render-ui main {
-          items: @config.items
+          items: (array/filter @config.items (fn action (or (= (array/len (object/get @action roles [])) 0) (array/includes (object/get @action roles []) @config.viewerRole))))
           position: @config.position
           children: @config.children
           className: @config.className
@@ -49,6 +50,10 @@ orbital FloatingToolbarOrbital {
         @label "Class Name"
         @description "Additional CSS classes on the positioned root"
         @tier "presentation"
+      viewerRole : string = ""
+        @label "Viewer's role"
+        @description "The viewer's role that each action's `roles` is checked against; bind it at the call site (e.g. `viewerRole: @user.role`). Empty = only actions with no `roles` show."
+        @tier "policy"
     }
   }
 

package/behaviors/lolo/ui/core/molecules/ui-form-actions.lolo

@@ -15,6 +15,7 @@ orbital FormActionsOrbital {
     event : event
     navigatesTo : string
     variant : string
+    roles : [string]
   }
   type FormActionsFiltersItem = {
     field : string!
@@ -40,7 +41,7 @@ orbital FormActionsOrbital {
         (render-ui main {
           children: @config.children
           primary: @config.primary
-          secondary: @config.secondary
+          secondary: (array/filter @config.secondary (fn action (or (= (array/len (object/get @action roles [])) 0) (array/includes (object/get @action roles []) @config.viewerRole))))
           variant: @config.variant
           orientation: @config.orientation
           className: @config.className
@@ -84,6 +85,10 @@ orbital FormActionsOrbital {
         @label "Look"
         @description "Layer 2 visual treatment for the action-cluster (form-actions) pattern."
         @tier "presentation"
+      viewerRole : string = ""
+        @label "Viewer's role"
+        @description "The viewer's role that each action's `roles` is checked against; bind it at the call site (e.g. `viewerRole: @user.role`). Empty = only actions with no `roles` show."
+        @tier "policy"
     }
   }
 

package/behaviors/lolo/ui/core/molecules/ui-graph-canvas.lolo

@@ -41,6 +41,7 @@ orbital GraphCanvasOrbital {
     event : event
     navigatesTo : string
     variant : "primary" | "secondary" | "ghost"
+    roles : [string]
   }
   type GraphCanvasError = {
     message : string!
@@ -128,7 +129,7 @@ orbital GraphCanvasOrbital {
           showLabels: @config.showLabels
           interactive: @config.interactive
           draggable: @config.draggable
-          actions: @config.actions
+          actions: (array/filter @config.actions (fn action (or (= (array/len (object/get @action roles [])) 0) (array/includes (object/get @action roles []) @config.viewerRole))))
           onNodeClick: @config.onNodeClick
           onMarkClick: @config.onMarkClick
           onNodeDoubleClick: @config.onNodeDoubleClick
@@ -268,6 +269,10 @@ orbital GraphCanvasOrbital {
         @label "Class Name"
         @description "Additional CSS classes"
         @tier "presentation"
+      viewerRole : string = ""
+        @label "Viewer's role"
+        @description "The viewer's role that each action's `roles` is checked against; bind it at the call site (e.g. `viewerRole: @user.role`). Empty = only actions with no `roles` show."
+        @tier "policy"
     }
   }
 

package/behaviors/lolo/ui/core/molecules/ui-menu.lolo

@@ -14,6 +14,7 @@ orbital MenuOrbital {
     url : string
     variant : "default" | "danger"
     subMenu : [MenuItemsItem]
+    roles : [string]
   }
 
   entity MenuItem [runtime] {
@@ -27,7 +28,7 @@ orbital MenuOrbital {
       INIT -> idle
         (render-ui main {
           trigger: @config.trigger
-          items: @config.items
+          items: (array/filter @config.items (fn action (or (= (array/len (object/get @action roles [])) 0) (array/includes (object/get @action roles []) @config.viewerRole))))
           position: @config.position
           className: @config.className
           header: @config.header
@@ -61,6 +62,10 @@ orbital MenuOrbital {
         @label "Footer"
         @description "Optional slot rendered below the items."
         @tier "presentation"
+      viewerRole : string = ""
+        @label "Viewer's role"
+        @description "The viewer's role that each action's `roles` is checked against; bind it at the call site (e.g. `viewerRole: @user.role`). Empty = only actions with no `roles` show."
+        @tier "policy"
     }
   }
 

package/behaviors/lolo/ui/core/molecules/ui-meter.lolo

@@ -12,6 +12,7 @@ orbital MeterOrbital {
     event : event
     navigatesTo : string
     variant : "primary" | "secondary" | "ghost"
+    roles : [string]
   }
   type MeterError = {
     message : string!
@@ -40,7 +41,7 @@ orbital MeterOrbital {
           segments: @config.segments
           showValue: @config.showValue
           size: @config.size
-          actions: @config.actions
+          actions: (array/filter @config.actions (fn action (or (= (array/len (object/get @action roles [])) 0) (array/includes (object/get @action roles []) @config.viewerRole))))
           isLoading: @config.isLoading
           error: @config.error
           className: @config.className
@@ -105,6 +106,10 @@ orbital MeterOrbital {
         @label "Class Name"
         @description "Additional CSS classes"
         @tier "presentation"
+      viewerRole : string = ""
+        @label "Viewer's role"
+        @description "The viewer's role that each action's `roles` is checked against; bind it at the call site (e.g. `viewerRole: @user.role`). Empty = only actions with no `roles` show."
+        @tier "policy"
     }
   }
 

package/behaviors/lolo/ui/core/molecules/ui-modal.lolo

@@ -32,6 +32,7 @@ orbital ModalOrbital {
           closeEvent: @config.closeEvent
           swipeDownToClose: @config.swipeDownToClose
           look: @config.look
+          contained: @config.contained
           type: modal
         })
     }
@@ -117,6 +118,10 @@ orbital ModalOrbital {
         @label "Look"
         @description "Layer 2 visual treatment — orthogonal to the semantic variant."
         @tier "presentation"
+      contained : boolean = false
+        @label "Contained"
+        @description "Render inside the nearest positioned ancestor (a preview frame) instead of portaling over the whole window; page scroll is left alone."
+        @tier "presentation"
     }
   }
 

package/behaviors/lolo/ui/core/molecules/ui-page-header.lolo

@@ -18,6 +18,7 @@ orbital PageHeaderOrbital {
     icon : icon
     loading : boolean
     disabled : boolean
+    roles : [string]
   }
   type PageHeaderError = {
     message : string!
@@ -42,12 +43,13 @@ orbital PageHeaderOrbital {
       INIT -> idle
         (render-ui main {
           title: @config.title
+          icon: @config.icon
           subtitle: @config.subtitle
           showBack: @config.showBack
           backEvent: @config.backEvent
           breadcrumbs: @config.breadcrumbs
           status: @config.status
-          actions: @config.actions
+          actions: (array/filter @config.actions (fn action (or (= (array/len (object/get @action roles [])) 0) (array/includes (object/get @action roles []) @config.viewerRole))))
           isLoading: @config.isLoading
           error: @config.error
           tabs: @config.tabs
@@ -75,6 +77,10 @@ orbital PageHeaderOrbital {
         @label "Title"
         @description "Page title - accepts string or number from generated code accessing dynamic entity data"
         @tier "presentation"
+      icon : icon
+        @label "Icon"
+        @description "Icon shown before the title."
+        @tier "presentation"
       subtitle : scalar
         @label "Subtitle"
         @description "Optional subtitle/description"
@@ -127,6 +133,10 @@ orbital PageHeaderOrbital {
         @label "Class Name"
         @description "className prop"
         @tier "presentation"
+      viewerRole : string = ""
+        @label "Viewer's role"
+        @description "The viewer's role that each action's `roles` is checked against; bind it at the call site (e.g. `viewerRole: @user.role`). Empty = only actions with no `roles` show."
+        @tier "policy"
     }
   }
 

package/behaviors/lolo/ui/core/molecules/ui-page-transition.lolo

@@ -22,7 +22,7 @@ orbital PageTransitionOrbital {
     config {
       locationKey : string = ""
         @label "Location Key"
-        @description "Value that changes on navigation (e.g. `location.pathname`)."
+        @description "Value that changes on navigation (a page path)."
         @tier "presentation"
       children : node
         @label "Children"